EU-US Privacy Shield: a safe alternative?
The EU-US Privacy Shield adequacy decision has been adopted by the European Commission on 12 July 2016. This decision replaces the old Safe Harbor Regime (which was invalidated by the CJEU in the Schrems case) and allows personal data transfers to certified recipients in the US. US Companies will be able to certify for the Privacy Shield with the US Department of Commerce from 1 August 2016. In this context, the Article 29 Working Party ("WP 29", regrouping all data protection authorities in the EU/EEA) published a statement on 26 July 2016. Despite strong concerns, the WP 29 will soon provide information to data controllers about their obligations in this respect and grants a period of 12 months to prove the robustness of the Privacy Shield.
Please read more in our newsletter on this topic.